openssh unix dev - Jul 2000 - Test snapshot

Can interested users please test the latest snapshot at
http://www.mindrot.org/misc/junk/openssh-SNAP-2000071102.tar.gz

It contains quite a few fixes for small problems that have been 
reported in the last few weeks.

Pending feedback it is going to become 2.1.1p3

Regards,
Damien Miller

--------------- Changelog:

20000711
 - (djm) Fixup for AIX getuserattr() support from Tom Bertelson
   <tbert at abac.com>
 - (djm) ReliantUNIX support from Udo Schweigert <ust at cert.siemens.de>
 - (djm) NeXT: dirent structures to get scp working from Ben Lindstrom 
   <mouring at pconline.com>
 - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report 
   from Jim Watt <jimw at peisj.pebio.com>
 - (djm) Replaced bsd-snprintf.c with one from Mutt source tree, it is known
   to compile on more platforms (incl NeXT).
 - (djm) Added bsd-inet_aton and configure support for NeXT
 - (djm) Misc NeXT fixes from Ben Lindstrom <mouring at pconline.com>
 - (djm) OpenBSD CVS updates:
   - markus at cvs.openbsd.org  2000/06/26 03:22:29
     [authfd.c]
     cleanup, less cut&paste
   - markus at cvs.openbsd.org  2000/06/26 15:59:19
     [servconf.c servconf.h session.c sshd.8 sshd.c]
     MaxStartups: limit number of unauthenticated connections, work by 
     theo and me
   - deraadt at cvs.openbsd.org 2000/07/05 14:18:07
     [session.c]
     use no_x11_forwarding_flag correctly; provos ok
   - provos at cvs.openbsd.org  2000/07/05 15:35:57
     [sshd.c]
     typo
   - aaron at cvs.openbsd.org   2000/07/05 22:06:58
     [scp.1 ssh-agent.1 ssh-keygen.1 sshd.8]
     Insert more missing .El directives. Our troff really should identify 
     these and spit out a warning.
   - todd at cvs.openbsd.org    2000/07/06 21:55:04
     [auth-rsa.c auth2.c ssh-keygen.c]
     clean code is good code
   - deraadt at cvs.openbsd.org 2000/07/07 02:14:29
     [serverloop.c]
     sense of port forwarding flag test was backwards
   - provos at cvs.openbsd.org  2000/07/08 17:17:31
     [compat.c readconf.c]
     replace strtok with strsep; from David Young <dyoung at onthejob.net>
   - deraadt at cvs.openbsd.org 2000/07/08 19:21:15
     [auth.h]
     KNF
   - ho at cvs.openbsd.org      2000/07/08 19:27:33
     [compat.c readconf.c]
     Better conditions for strsep() ending.
   - ho at cvs.openbsd.org      2000/07/10 10:27:05
     [readconf.c]
     Get the correct message on errors. (niels@ ok)
   - ho at cvs.openbsd.org      2000/07/10 10:30:25
     [cipher.c kex.c servconf.c]
     strtok() --> strsep(). (niels@ ok)
 - (djm) Fix problem with debug mode and MaxStartups

20000709
 - (djm) Only enable PAM_TTY kludge for Linux. Problem report from
   Kevin Steves <stevesk at sweden.hp.com>
 - (djm) Match prototype and function declaration for rresvport_af.
   Problem report from Niklas Edmundsson <nikke at ing.umu.se>
 - (djm) Missing $(DESTDIR) on host-key target causing problems with RPM 
   builds. Problem report from Gregory Leblanc <GLeblanc at
cu-portland.edu>
 - (djm) Replace ut_name with ut_user. Patch from Jim Watt
   <jimw at peisj.pebio.com>
 - (djm) Fix pam sprintf fix
 - (djm) Cleanup entropy collection code a little more. Split initialisation
   from seeding, perform intialisation immediatly at start, be careful with
   uids. Based on problem report from Jim Watt <jimw at peisj.pebio.com>
 - (djm) More NeXT compatibility from Ben Lindstrom <mouring at
pconline.com>
   Including sigaction() et al. replacements
 - (djm) AIX getuserattr() session initialisation from Tom Bertelson 
   <tbert at abac.com>

20000708
 - (djm) Fix bad fprintf format handling in auth-pam.c. Patch from 
   Aaron Hopkins <aaron at die.net>
 - (djm) Fix incorrect configure handling of --with-rsh-path option. Fix from
   Lutz Jaenicke <Lutz.Jaenicke at aet.TU-Cottbus.DE>
 - (djm) Fixed undefined variables for OSF SIA. Report from 
   Baars, Henk <Hendrik.Baars at nl.origin-it.com>
 - (djm) Handle EWOULDBLOCK returns from read() and write() in atomicio.c 
   Fix from Marquess, Steve Mr JMLFDC <Steve.Marquess at
DET.AMEDD.ARMY.MIL>
 - (djm) Don't use inet_addr. 

20000702
 - (djm) Fix brace mismatch from Corinna Vinschen <vinschen at cygnus.com>
 - (djm) Stop shadow expiry checking from preventing logins with NIS. Based
   on fix from HARUYAMA Seigo <haruyama at nt.phys.s.u-tokyo.ac.jp>
 - (djm) Use standard OpenSSL functions in auth-skey.c. Patch from
   Chris, the Young One <cky at pobox.com>
 - (djm) Fix scp progress meter on really wide terminals. Based on patch 
   from James H. Cloos Jr. <cloos at jhcloos.com>



---------------


-- 
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)

Hi,

strsep doesn't seem to be supported on hpux (same on solaris)...  Is it
possible
to supply BSD sources as seems to be already done for strlcpy etc ?


     cc -o ssh ssh.o sshconnect.o sshconnect1.o sshconnect2.o log-client.o
readconf.o clientloop.o -L.  -L/opt/zlib/lib -L/opt/openssl/lib -L/opt/openssl
-lssh
-lopenbsd-compat -lnsl -lz  -lpam -lcrypto
/usr/ccs/bin/ld: Unsatisfied symbols:
   strsep (code)
*** Error exit code 1

Stop.



Thanks,
Klaus Engelhardt

Hi Damien,

thanks for the new snapshot. I just tried openssh-2000071103 on Sparc
Solaris 8 using gcc 2.95.2. Unfortunately, the bug I reported last week
is still there. The OpenSSH sshd sets up the terminal in such a way that
SIGINT is being ignored. You cannot Ctrl-C a sleep 5, say.

This can be observed using Bourne Shell and bash. zsh and su seem to
reset the signal handlers, to the problem doesn't exist there. I've been
looking arount pty.c and compared it to the old SSH1 version. They are a
bit different, but I couldn't identify a piece of code that would be the
reason for the different behaviour.

If you have suggestions what to try I'd be happy to volunteer. ;-)

Cheers, Nils
-- 
Nils Ellmenreich - Fakultaet fuer Math./Informatik             - Nils @
http://www.fmi.uni-passau.de/~nils  -  Univ. Passau   -   Uni-Passau.DE

Thanks!

I grabbed openssh-SNAP-2000071103 and it works now.  I thought I was
keeping up on the list messages, but I must have missed this bug fix
earlier.

Thanks to all those who have helped make OpenSSH so great!


On Wed, 12 Jul 2000, Damien Miller wrote:
> > Has anyone else seen this problem?  Anyone have any ideas what could
be
> > wrong?  Am I brain dead and just setting something up wrong, or is
there
> > indeed a bug crawling around here?
>  
> There has been at least one bug relating to X forwarding fixed 
> recently. Can you replicate your problem with the snapshots at
> http://www.mindrot.org/misc/junk ?
> 
> -d